CVE-2015-3418

High

Published: 13/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The ProcPutImage function in X.Org Server before version 1.16.4 allows attackers to cause a denial of service via a zero-height PutImage request, leading to a divide-by-zero error and server crash.

Risk Assessment

Attackers can exploit this vulnerability to crash the server, potentially causing downtime for services relying on X.Org Server.

Recommendation

It is recommended to update X.Org Server to version 1.16.4 or later to mitigate this vulnerability.

Other vulnerabilities in X.Org Server (xserver, xorg-server)

CVE-2017-13723High
In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.

Original NVD description (English source)

The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service (divide-by-zero and crash) via a zero-height PutImage request.